Dominator Tree Certification and Independent Spanning 



We consider problems related to dominators and independent spanning trees in flow 
graphs and provide linear-time algorithms for their solutions. We describe a way to 
certify the correctness of a dominator tree by providing an order of its vertices with a 
special property, which we call low-high. Given a flow graph, a rooted tree whose vertices 
are those of the flow graph, and a vertex order, it is easy to verify in linear time that the 
order is low-high and that the tree is the dominator tree. Low-high orders are related to 
pairs of spanning trees with certain disjointness properties. We call two spanning trees 
B and R of a flow graph with start vertex s independent if, for every vertex v, the paths 
from s to v in B and R share only the dominators of v. We call two such trees strongly 
independent if, for every pair of vertices v and w, either the paths from s to v in B 
and from s to w in R, or the paths from s to v in R and s to w in B, share only the 
common dominators of v and w. We give a linear-time algorithm to construct a pair of 
strongly independent spanning trees from a low-high order of the dominator tree. We 
give three linear-time algorithms to construct a low-high order of the dominator tree. The 
first requires as input only the flow graph and its dominator tree, but it applies only to 
reducible flow graphs, which include acyclic flow graphs as a special case. The second and 
third algorithms apply to general graphs but they require additional input: the second 
needs header information, the third needs semi-dominators and related information. The 
third algorithm begins by constructing a pair of independent spanning trees. Although 
this construction is simple, its correctness proof is surprisingly complicated. 
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1 Introduction 



Let T be a rooted tree. We denote by t(v) the parent of vertex v; t(v) = null if v is the root 
of T. If v is an ancestor of w , T[v, w] is the path from v to w. If v is a proper ancestor of 
w, T(v, w] is the path to w from the child of v that is an ancestor of w. Tree T is flat if 
its root is the parent of every other vertex. A preorder of T is a total order of the vertices 
of T such that, for each vertex v, the descendants of v are ordered consecutively, with v 
first. Equivalently, for each non-root vertex v, t(v) is less than v, and if x is a descendant 
of v but y is not, then y is less than v or greater than x. The possible preorders of T are 
exactly those that can be obtained by totally ordering the children of each vertex, doing a 
depth-first traversal of T, and ordering the vertices in the order they are first visited by the 
traversal. 

A flow graph is a directed graph with a distinguished start vertex s such that every vertex 
is reachable from s. Throughout this paper G = (V, A, s) is a flow graph with vertex set 
V, arc set A, start vertex s, and no arc entering s: arcs entering s can be deleted without 
affecting any of the concepts we study. We denote the number of vertices by n and the 
number of arcs by m. To simplify bounds we assume n > 1. Since m > n — 1, this implies 
m = Q(n). 

A fundamental concept in flow graphs is that of dominators. A vertex it is a dominator 
of a vertex v (u dominates v) if every path from s to v contains it; « is a proper dominator 
of v if u dominates v and u ^ v. The dominator relation is reflexive and transitive. Its 
transitive reduction is a rooted tree, the dominator tree D: v dominates w if and only if v is 
an ancestor of w in D. That is, the path D[s,u] contains exactly the dominators of v. See 
Figured) Tree D has root s and vertex set V; it is not in general a spanning tree of G since 
its arcs need not be in A. If v ^ s, d(v), the parent of v in D, is the immediate dominator 
of v: it is the unique proper dominator of v that is dominated by all proper dominators 
of v. (Some authors use idom(v) to denote the immediate dominator of V.) Dominators 
have applications in diverse areas including program optimization and code generation [12] , 
constraint programming [ID], circuit testing [3], theoretical biology [TJ, memory profiling [36J, 
connectivity and path-determination problems [TTJ Q21 E2], arid the analysis of diffusion 
networks [23] . Lengauer and Tarjan gave two near-linear-time algorithms for computing D 
that run fast in practice and have been used in many of these applications. The simpler of 
these runs in 0(mlog/ m / n+1 ) 77.) time. The other runs in 0(ma(m,n)) time, where a is a 
functional inverse of Ackermann's function [15]. Subsequently, more-complicated but truly 
linear-time algorithms were discovered [2J El [2DJ . 

The genesis of the work we report here was a question asked of the second author by Steve 
Weeks in 1999: how does one know that the output produced by these fast but complicated 
dominator-finding algorithms is correct? That is, is there a simple way to verify that a given 
tree is the dominator tree of a given graph? Here what "simple" means is subjective: since 
linear time is necessary and sufficient for verification, running time cannot be the measure of 
simplicity. Nevertheless, one might hope for a verification method that avoids the technical 
complications of the fast algorithms for finding dominators. 

Our approach to this problem is to augment the dominator-finding algorithm to com- 
pute additional information, a certificate of correctness. The verifier uses the certificate to 
make dominator verification easier. This makes the dominator-finding algorithm a certifying 
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Figure 1: A flow graph and its dominator tree. 

algorithm [37] and gives a nice answer to Weeks' question. We describe a certificate of domi- 
nator correctness that makes verification not only linear-time but very simple. Finding such 
a certificate also takes linear time and is very simple, given certain information computed by 
the fast algorithms for finding dominators. To obtain our results on certification, we develop 
new theory about dominators and related concepts, theory that has other applications. 

We obtain a suitable certificate for dominators by generalizing results of Whitty |48j . 
Plein [39], and Cheriyan and Reif [9] on disjoint spanning trees. Suppose the dominator tree 
D is flat; that is, each vertex v ^ s has only one proper dominator, s. Then for any vertex 
v ^ s, only s and v are common to all paths from s to v. By Menger's Theorem [38], there 
are two paths from s to v containing no common vertex other than s and v. Whitty [18] 
proved that such paths can be realized for all v by a pair of trees: there are spanning trees B 
and R rooted at s such that for any vertex v, B[s,v] and R[s, v] share only s and v. We call 
such trees disjoint. Whitty actually proved something stronger: there are disjoint spanning 
trees B and R rooted at s such that, for any pair of distinct vertices v and w, either -B[s,t>] 
and R[s,w] share only s, or B[s,w] and R[s, v] share only s. We call such trees strongly 
disjoint. Trees can be disjoint without being strongly disjoint, as the example in Figure [2] 
shows. 

Plehn [39] and independently Cheriyan and Reif [9] gave simpler proofs of Whitty's result 
using what Cheriyan and Reif called a directed st-numbering as an intermediary. Given a 
directed graph with n vertices and two distinct vertices s and t, a directed st-numbering is 
a numbering of the vertices from 1 to n such that s is numbered 1, t is numbered n, and 
every other vertex v has an entering arc from a smaller vertex and an entering arc from a 
larger vertex. The proofs of Whitty, of Plehn, and of Cheriyan and Reif give polynomial- 
time constructions of directed st-numberings and of strongly disjoint spanning trees, but 
their constructions seem to require Q(nm) time in the worst case. Huck [25] later gave an 
0(nm)-time algorithm to find two disjoint spanning trees. 

We generalize these definitions and results to arbitrary flow graphs and present linear- 
time algorithms. Given a tree T rooted at s with vertex set V (not necessarily a spanning 
tree of G), a preorder of T is low-high on G if, for all v ^ s, (t(v),v) G A or there are 
two arcs (u,v) G A, (w,v) G A such that u is less than v, v is less than w, and w is not 
a descendant of v. Two spanning trees B and R rooted at s are independent if for all v, 
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Figure 2: A graph with two disjoint but not strongly disjoint spanning trees. Graph G has a 
flat dominator tree. Spanning trees B and R are disjoint, but B[s, g] D R[s, h] = {s, d} and 
B[s,h] fl R[s, g] = {s, b}, so B and R are not strongly disjoint. 

i?[s,i>] and Jf2[s, u] share only the dominators of v; B and R are strongly independent if for 
every pair of vertices v and w, either B[s, v] and R[s, w] share only the common dominators 
of v and w, or B[s, w] and R[s, v] share only the common dominators of v and w. See Figure 
|3j These three definitions extend the notions of st-numberings and disjoint and strongly 
disjoint spanning trees, respectively, to flow graphs with non-flat dominator trees. We prove 
that every flow graph has a pair of strongly independent spanning trees and its dominator 
tree has a low-high order. 

We develop linear-time algorithms related to these concepts. We present an algorithm 
that, given a flow graph and a tree with a vertex order, verifies that the order is low- 
high and that the tree is the dominator tree of the flow graph. We present an algorithm 
that, given a flow graph and its dominator tree with a low-high order, constructs a pair of 
strongly independent spanning trees. These trees have the additional property that they are 
arc-disjoint except for bridges. (A bridge is an arc (u, v) such that every path from r to 
v contains (u,v).) We present three algorithms to construct a low-high order, given a flow 
graph and its dominator tree. The first applies only to reducible flow graphs (defined below), 
a class that includes acyclic flow graphs. The second and third apply to arbitrary flow graphs, 
but both require additional input: the second requires information about headers (defined 
in Section [5]), the third requires information about semi-dominators (defined in Section |6]). 
The third algorithm uses the semi-dominator information to construct a pair of independent 
spanning trees, from which it then constructs a low-high ordering. Although both steps are 
simple, the correctness proof of the first step is surprisingly complicated. 

Many program control flow graphs are reducible. For these, the first low-high order algo- 
rithm can be used to certify the dominator tree. For arbitrary flow graphs, either the second 
or third algorithm can be used. Many applications of dominators need header information 
as well; for these, the second algorithm is appropriate, since the header information must 
be computed anyway. The fast algorithms for finding dominators do so by computing semi- 
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Figure 3: The flow graph of Figured! its dominator tree with vertices numbered in low-high 
order (numbers in brackets), and two strongly independent spanning trees B and R. 

dominators; it is easy to extend these algorithms to produce the information needed by the 
third algorithm. If the flow graph is not reducible, the application does not need header 
information, and dominators are computed by a simple algorithm that does not compute 
semi-dominators, such as the iterative algorithm of Cooper et al. [TU], the second algorithm 
can be used if headers are computed, which can be done in near-linear time jl6] using disjoint 
set union [15] or truly linear time [6] using additional techniques. Thus, depending on the 
situation, at least one of our three algorithms can be used to certify the dominator tree. 

Our paper is a rewritten and expanded combination of two conference papers [2U 122] . 
It contains six sections in addition to this introduction. Section [2] develops some properties 
of dominator trees and presents our algorithms to construct a pair of strongly independent 
spanning trees given a low-high order, and to verify the correctness of a dominator tree 
with a low-high order. Section [3] introduces the derived graph, which in effect allows us to 
reduce the problem of constructing a low-high order to the case of a flat dominator tree. 
Section 2] presents our algorithm for finding a low-high order on a reducible flow graph. As 
part of the implementation of this algorithm, we develop a simplified linear-time algorithm 
for a special case of the dynamic list order problem [51 [13]. This algorithm may well have 
other applications. Sections [5] and [6] contain our algorithms to find a low-high order on an 
arbitrary flow graph. The algorithm in Section uses header information, and the algorithm 
in Section [H] uses semi-dominator information. Section [7] mentions applications and open 
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problems. 



2 Dominators, Low-High Orders, and Strongly Inde- 
pendent Spanning Trees 

2.1 The parent and sibling properties 

Let T be a rooted tree whose vertex set is a subset of V. Tree T has the parent property 
if for all (v,w) G A, t(w) (the parent of w in T) is an ancestor of v in T. Since s has no 
entering arcs, but every other vertex has at least one entering arc (all vertices are reachable 
from s), the parent property implies that T is rooted at s and has vertex set exactly V. Tree 
T has the sibling property if v does not dominate w for all siblings v and w. The parent and 
sibling properties are necessary and sufficient for a tree to be the dominator tree. 

Theorem 2.1. Tree D has the parent and sibling properties. 

Proof. Tree D has the sibling property by definition. Suppose D violates the parent property. 
Then there is an arc (v, w) such that d(w) (the immediate dominator of w) is not an ancestor 
of v in D; that is, d(w) does not dominate v. But then there is a path from s to w that 
avoids d(w), consisting of a path from s to d avoiding d{w) followed by arc (v,w). Thus 
d(w) does not dominate w, a contradiction. □ 

Lemma 2.2. Suppose T has the parent property. Let u and v be vertices such that v ^ s 
and u is not a descendant oft(v) in T. Then any path from u to v contains t(v). 

Proof. Consider any path from u to v. Let (x, y) be the first arc on this path such that y is 
a descendant of t(v) in T. By the parent property, t(y) is an ancestor of x in T. But since x 
is not a descendant of t(v) in T, it must be the case that y = t(v). That is, the path contains 
t(v). □ 

Corollary 2.3. Suppose T has the parent property. If v is an ancestor of w in T , then v 
dominates w. 

Proof. Suppose v ^ s. By Lemma |2T2| any path from s to v contains t(v), so t(v) dominates 
v. The corollary follows by the transitivity of dominance. □ 

Corollary 2.4. Suppose T has the parent property and »/s. If x is a vertex on a simple 
path P from t(v) to v, then x is a descendant oft(v) but not a proper descendant of v. 

Proof. If x were a non-descendant of t(v), the part of P from x to v would contain t(v) by 
Lemma 12.21 so P would not be simple. If x were a proper descendant of v, the part of P 
from t(v) to x would contain v by Lemma [2.21 so P would not be simple. □ 

Theorem 2.5. A tree T has the parent and sibling properties if and only if T = D. 
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Proof. Theorem 12.11 gives the "if" half of the theorem. Suppose T has the parent property. 
By Corollary 12 .3[ if v is an ancestor of w in T, then v dominates w. Suppose v dominates 
w but v is not an ancestor of w. Since v ^ w, w does not dominate v. By Corollary 12.31 
w is not an ancestor of v in T, so v and w are unrelated. Let u be the nearest common 
ancestor of v and w in T, and let x and y be the children of u that are ancestors of v and w. 
By Corollary 12.31 x dominates v and y dominates w. By the transitivity of the dominator 
relation, x dominates w. Since both x and y dominate w, one must dominate the other, 
which violates the sibling property. This gives the "only if" half of the theorem. □ 

By Theorem 12. 5 1 to verify that a tree T is the dominator tree, it suffices to show (1) T 
is a rooted tree, (2) T has the parent property, and (3) T has the sibling property. It is 
straightforward to verify (1) in 0(n) time, assuming that T is given by its parent function: 
we just need to check that the parent function is defined for all vertices other than s and 
that there are no cycles. It is also easy to verify (2). This takes 0(1) time per arc, for a total 
of 0{m) time, given an 0(l)-time test of the ancestor-descendant relation. There are several 
simple 0(l)-time tests of this relation [33]. The most convenient one for us is to number the 
vertices from 1 to n in any preorder of T, and to compute the number of descendants of each 
vertex v, which we denote by size(v). If vertices are identified by number, v is an ancestor 
of w if and only if v < w < v + size(v). If T is given by its parent function, we can number 
the vertices and compute their sizes by first building a list of children for each vertex and 
then doing a depth-first traversal, all of which takes 0(n) time. 

The hardest step in verification is to show (3). We shall prove that a tree with the 
parent property has the sibling property if and only if it has a low-high order. We prove 
sufficiency in this section and necessity in Section [4] for reducible graphs, and in Section [5] for 
arbitrary graphs. Unlike the parent property, which is easy to test, it is not so easy to test 
for the existence of a low-high order, although it is easy to test if a given order is low-high. 
Thus we place the burden of constructing such an order on the algorithm that computes the 
dominator tree, not on the verification algorithm: the order certifies the correctness of the 
tree. 

2.2 Construction of Two Strongly Independent Spanning Trees 

To prove that a tree with the parent property and a low-high order has the sibling property, 
and because it is interesting in its own right, we show how to construct a pair of strongly 
independent spanning trees, given a tree T with the parent property and a low-high order. 

Algorithm 1 applied to the graph in Figure [TJwith the low-high order in Figure [3] produces 
the trees shown in Figure [3j 

Lemma 2.6. Let T be a tree with the parent property and a low-high order. For any vertex 
v 7^ s, at least one of Cases 1, 2, and 3 applies. Thus Algorithm 1 defines b(v) and r(v) for 
all v 7^ s. 

Proof. Let v ^ s be a vertex to which Case 1 does not apply. The definition of a low-high 
order implies that (t(v), v) £ A. If (t(v), v) is the only arc entering v from a non- descendant 
of v, then Case 3 applies. Otherwise, there is an arc (u, v) such that u ^ t(v) and u is not a 
descendant of v. Since Case 1 does not apply, u < v in low-high order, so Case 2 applies. □ 
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Algorithm 1: Construction of Two Strongly Independent Spanning Trees B 

and R 

Let T be a tree with the parent property and a low-high order. For each vertex d^s, 
apply exactly one of the following cases to choose arcs (b(v),v) in B and (r(v),v) in R (if 
Cases 1 and 2 both apply, apply either one): 

Case 1: There are two arcs (u,v) and (w,v) such that u < v < w in low-high order 
and w is not a descendant of v in T. Choose two such arcs, and set b{y) = u and 
r(v) = w. 

Case 2: (t(v),v) is an arc and there is another arc (u,v) such that u < v in low-high 
order. Choose such an arc, and set b(v) = u and r(v) = t(v). 

Case 3: (t(v), v) is the only arc entering v from a non- descendant of v. Set b(v) = r(v) = 
t(v). 



Lemma 2.7. For any vertex v ^ s, there is a path in R from t(v) to v containing only t(v) 
and vertices no less than v in low-high order. 

Proof. Suppose the lemma is false. Let v be the largest vertex in low-high order for which 
it fails. Then r(v) ^ t(v), so r{y) > v and r(v) is not a descendant of v. Let x be the sibling 
of v that is an ancestor of r(v). Since r{v) > v and the order is a preorder, all descendants 
of x are greater than v. The choice of v implies that the lemma holds for x and all its 
descendants. It follows that there is a path in R from t(x) to x to r(v) that contains only 
t(x) and vertices no less than x. Adding (r(v), v) to this path gives a path from t(v) = t(x) 
to v satisfying the lemma, a contradiction. □ 

Theorem 2.8. B and R are strongly independent spanning trees rooted at s. 

Proof. First we prove that B and R are spanning trees rooted at s, then that they are 
independent, and finally that they are strongly independent. Since each vertex v ^ s has an 
entering arc (b(v),v) with b(v) < v, B is a spanning tree rooted at s. By Lemma [2.71 every 
vertex is reachable from s in R, so R is also a spanning tree rooted at s. 

Suppose B and R are not independent. Let v be the minimum vertex such that -B[s,i>] 
and R[s, v] share a vertex other than a dominator of v. By Corollary I2.3[ t(v) dominates v, 
so B[s,v] and both contain t(v). By the choice of v, B[s,t(v)] and R[s,t(v)] share 

only dominators of t(v). By Corollary 12.41 no vertices on B[s,t(v)] or R[s,t(v)} are proper 
descendants of t(v), but all vertices on B[t(v),v] and R[t(v),v] are descendants of t(v), so 
B[t(v),v] and R[t(v),v] must share a vertex other than t(v) and v. But B[t(v),v] contains 
only v and vertices less than v, and by Lemma \2. 71 R[t(v),v] contains only t(v) and vertices 
no less than v, so B[t(v),v] and R[t(v),v] share only t(v) and v, a contradiction. Thus B 
and R are independent. 

Suppose that B and R are not strongly independent; let v and w be vertices such that 
v < w and B[s, v] and R[s,w] share a vertex other than a common dominator of v and w. 
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Let u be the nearest common ancestor of v and w in T, which dominates both. Since B 
and R are independent, £?[s, w] and i2[s,w] share only dominators of u, which are common 
dominators of v and w. By Corollary 12.41 B[s,u] and R[s,u] contain no proper descendants 
of u, but all vertices on B[u, v] and R[u,w] are descendants of u, so B[s,u] and R[u,w] 
contain only u in common, as do and B[u,v}. If follows that B[u, v] and R[u,w] 

share a vertex other than u. This implies that v and w are unrelated. Let x and y be the 
children of u that are ancestors of v and w, respectively. All descendants of x are less than 
all descendants of y. Path contains only vertices less than y, and R[u, w] contains 

only u and vertices no less than y, so B[u, v] and R[u, w] share only u, a contradiction. Thus 
B and R are strongly independent. □ 

Remark: For two distinct vertices v and w, the low-high order tells us which pair of paths, 
-B[s,i>] and R[s,w], or i?[s,u] and B[s,w], share only the common dominators v and w: the 
former if v < w, the latter if v > w. 

Algorithm 1 runs in 0(m) time, given an 0(l)-time test of the ancestor-descendant 
relation: for each vertex v 7^ s, we examine the entering arcs until finding two that allow 
Case 1 or 2 to be applied, or running out of entering arcs, allowing Case 3 to be applied: 
v must have at least one entering arc from a non-descendant; if there is exactly one such 
arc, it must be (t(v), v). To test the ancestor-descendant relation, we use the 0(l)-time test 
described above, with the low-high order serving as the preorder. 

Case 3 applies only when (t(v), v) is a bridge (all paths from stov contain (t(v), v)), so B 
and R are arc-disjoint except for the bridges. Tarjan [16] previously gave a near-linear-time 
algorithm, subsequently improved to linear time [5J, to construct a pair of spanning trees 
that are arc-disjoint except for the bridges. His construction need not produce independent 
spanning trees, however. If we are willing to allow B and R to share non-bridges, then we 
can simplify Algorithm 1 by combining Cases 2 and 3 into one case: 

Case 2': (t(v),v) is an arc. Set b{v) = r{v) = t(v). 

Theorem 2.9. IfT has the parent property and has a low-high order, then T has the sibling 
property, and hence T = D. 

Proof. Apply Algorithm 1 to construct two strongly independent spanning trees B and R 
rooted at s. Let v and w be siblings with common parent u in T. Assume without loss of 
generality that v < w. The path S[s,u] avoids w, so w does not dominate v. The path 
B[s,u] followed by R[u,w] contains no vertices greater than u and less than w and hence 
avoids v, so v does not dominate w. Thus T has the sibling property. By Theorem 12.51 
T = D. □ 

A question raised by Algorithm 1 is whether every pair of strongly independent spanning 
trees is the result of applying Algorithm 1 to some low-high order of D. The answer is no. 
Consider the graph G and its spanning trees B and R shown in Figure HI The dominator 
tree D of G is flat (v 7^ s implies d(v) = s), and B and R are strongly independent. Deleting 
arcs in D from G and reversing arcs in R results in the cycle T shown in Figure HI If B and 
R were constructible by Algorithm 1 from some low-high order of D, T would be acyclic. 
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Figure 4: Two strongly independent spanning trees not constructable by Algorithm 1. 

2.3 Verification of a Dominator Tree with a Low-High Order 

Now we turn to the problem of verifying that a vertex order is low-high. Let tree T be 
specified by its parent function, with a vertex order given as a numbering from 1 to n. We 
can verify that the ordering is low-high as follows. Construct lists of the children of each 
vertex in increasing order, by beginning with empty lists and adding each vertex v ^ s in 
increasing order to the back of the list for t(v). Do a depth- first traversal of T to verify that 
the corresponding preorder is the same as the given order. During the traversal, compute 
the size of each vertex. After the traversal, test that the order is low-high by examining the 
arcs entering each vertex and verifying the existence of the one or two arcs needed to make 
the order low-high, using the numbers and sizes to test the ancestor-descendant relation in 
0(1) time. 

Thus we obtain the following algorithm to verify a dominator tree with a low-high order: 
Steps 1 and 2 take 0{n) time; Step 3 takes 0(m) time. 

We conclude this section with a lemma about the structure of strongly connected sub- 
graphs that we shall need in Section A subgraph of G is strongly connected if there is a 
path from any vertex in the subgraph to any other vertex in the subgraph containing only 
vertices in the subgraph. 

Lemma 2.10. Let T be a tree with the parent property, and let S be the set of vertices of 
a strongly connected subgraph of G. Then S consists of a set of siblings in T and possibly 
some of their descendants in T . 

Proof. Let x be the nearest common ancestor in T of the vertices in S. If x G S the lemma 
holds: S contains x and possibly some of its descendants in T. If x ^ S, there are at least 
two children of x in T that have vertices in S as descendants, and all vertices in S are 
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Algorithm 2: Verification of a Dominator Tree D with a Low-High Order 
Step 1: Verify that the given "tree" D is actually a tree. 

Step 2: Construct lists of the children of each vertex in increasing order. Do a depth- first 
traversal of D to verify that the preorder generated by the search is the same as the 
given order and to compute the size of each vertex. 

Step 3: Check that the arcs satisfy the parent property and that each vertex has the one 
or two entering arcs needed to make the order low-high, using the numbers and sizes 
to test the ancestor-descendant relation in 0(1) time. 




Figure 5: The derived graph of the flow graph of Figure [H 

descendants of such children. Any path from a non- descendant of such a child of x to a 
descendant must contain x by the parent property. Thus any such child must be in S. □ 

3 The Derived Graph 

Theorem 12.91 states that a tree with the parent property and a low-high order has the sibling 
property and hence is D. It remains to prove the converse, namely that D has a low-high 
order, and to develop fast algorithms to find such an order. We do this in the next three 
sections. In this section we introduce the derived graph, which makes our task easier by in 
effect reducing the problem of finding a low-high order to the case of a flat dominator tree. 

Let T be a tree with the parent property. (Tree T could be D or a tree claimed to 
be D.) By the definition of the parent property, if (v,w) is an arc, the parent t(w) of 
w is an ancestor of v in T. The derived arc of (v, w) is null if w is an ancestor of v, 
(v',w) otherwise, where v' — v if v — t(w), v' is the sibling of w that is an ancestor of 
v if v t(w). The derived graph G' is the graph with vertex set V and arc set A' = 
{(v',w) | (v',w) is the non-null derived arc of some arc in ^4}. See Figure [5j 

Lemma 3.1. Tree T has the parent property in G'. 

Proof. Each derived arc leads from a vertex to one of its children or siblings. □ 
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Lemma 3.2. If P is a simple path from s to v in G, there is a simple path from s to v in 
G' containing only vertices on P. 

Proof. By induction on the number of arcs on P. The lemma is immediate if P has no arcs. 
Suppose P has at least one arc. Let (it, v) be the last arc on P. Since P is simple, it cannot 
be a descendant of v by Corollary 12.31 Thus (u,v) has a non-null derived arc (u',v). Since 
it' is an ancestor of u in T, it' is on P by Corollary 12.31 By the induction hypothesis, there 
is a simple path P' from s to it' in G' containing only vertices on the part of P from s to u' . 
Adding (it', v) to this path gives the desired path P'. □ 

Corollary 3.3. Graph G' is a flow graph. 

Proof. By Lemma [3. 2\ in G' all vertices are reachable from s. □ 

Lemma 3.4. // (i/, w) is the non-null derived arc of an arc (v, w), there is a path in G from 
v' to w containing only w and descendants of v' in T. 

Proof. By Corollary 12.31 v' dominates v. Since G is a flow graph, there is a path P from s to 
v. Path P contains v'. By Corollary 12.41 the part of P from v' to v contains only descendants 
of v' in T. Adding (v, w) to the end of this path gives a path satisfying the lemma. □ 

Corollary 3.5. If G is acyclic, so is G' . 

Proof. If G' contained a cycle, so would G by Lemma [3.41 □ 

Lemma 3.6. Tree T has the sibling property in G if and only if it has the sibling property 
in G' . That is, T is the dominator tree of G if and only if it is the dominator tree of G' . 

Proof. Let v and w be siblings in T. Suppose there is a simple path P from s to w in G that 
avoids v. Then the path P' from s to w in G' given by Lemma 13.21 also avoids v. Suppose 
there is a simple path P' from s to w in G' that avoids v. Let it be the common parent 
of v and w. By Corollary 12.41 there is a path in G from s to it that contains no proper 
descendants of it and hence avoids v. Thus all we need to show is that there is a path from 
it to w in G that avoids v. The part of P' from it to w consists of an arc from it to a child 
of it, followed by a sequence of arcs from one child of it to another, no such child being v. 
The first such arc is also an arc of G. Consider one of the derived arcs (x', y) on P' from one 
child of it to another. By Lemma 13.41 there is a path in G from x' to y that contains only y 
and descendants of x' in T, and hence avoids v. Thus we can replace each arc of the part of 
P' from it to if by a -u-avoiding path in G. Therefore there is a path in G from s to w that 
avoids v. □ 

Lemma 3.7. A preorder ofT is low-high on G if and only if it is low-high on G' . 

Proof. Let v ^ s. Suppose the order is low-high on G. By Theorem 12.91 T = D. Let v ^ s. 
If (t(v),v) G A, then (t(v),v) G A'. If (t(v),v) G" A, there are arcs (u,v) and (w,v) such 
that it < v < w in the given preorder and w is not a descendant of v in T. Vertex it is 
not a descendant of v since it is numbered less than v. Thus (it, v) and (w, v) have non-null 
derived arcs (it', v) and (it/, v), it' and w' are siblings of v in T, and it' < v < w' in the given 
preorder. Thus the order is low- high on G'. 
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Suppose the order is low-high on G'. Let v 7^ s. If (t(v),v) G A', then (t(v),v) G A. 
If (t(v),v) A', there are arcs (u,v) and (w,t>) in G with non-null derived arcs (u',v) and 
(it/, i>) such that u' < v < w' in the given preorder and v! and are siblings of v in T. Since 
the order is a preorder, u < v < w in the preorder. Furthermore w is not a descendant of v. 
Thus the order is low-high on G. □ 

We can find the derived arcs in 0(m) time the following algorithm: 



Algorithm 3: Construction of Derived Arcs 

Step 1: Let T be a tree with the parent property. Number the vertices of T from 1 to n 
in preorder and compute the size of each vertex. Identify vertices by number. 

Step 2: Delete each arc (v,w) such that v is a descendant of w in T. 

Step 3: For each arc (v,w) such that v = t(w), let (v,w) be its derived arc. 

Step 4: For each arc (v, w) such that v and w are unrelated, construct a triple (t(w), v, w). 
For each vertex u > 1, construct a triple it, 0). 

Step 5: Sort the triples in increasing lexicographic order by doing a three-pass radix sort. 

Step 6: Process the triples in increasing order. To process a triple of the form (t(u),u, 0), 
set x = u, where x is a global variable. To process a triple of the form (t(w),v,w), 
let (x, w) be the derived arc of (v, w). 



Theorem 3.8. Algorithm 3 is correct. 

Proof. Steps 2 and 3 correctly handle the arcs (v, w) such that v and w are related in T. 
Consider an arc (v,w) such that v and w are unrelated in T. Let (v',w) be the derived arc 
of (v,w). Then t(v') = t(w) and v' < v, so triple (t(v'),v',0) precedes (t(w),v,w) once the 
triples are sorted lexicographically. Suppose there is a triple (t(u), u, 0) following (t(v'), v', 0) 
but preceding (t(w),v, w). Then t(u) = t{y') and v' < u < v. But vertices are numbered 
in preorder, so u must be a descendant of v', a contradiction. Hence there is no such triple 
(t(u), u, 0), which implies x = v' when (t(w), v, w) is processed, so Step 6 correctly computes 
the derived arc of (v,w). □ 

4 Reducible Flow Graphs 

A reducible flow graph [24"| |4*4] is one in which every strongly connected subgraph S has a 
single entry vertex v such every path from s to a vertex in 5 contains v. There are many 
equivalent characterizations of reducible flow graphs jB], and there are algorithms to test 
reducibility in near-linear [H] and truly linear [6] time. One notion of a "structured" program 
is that its flow graph is reducible. Reducibility simplifies many computations, although not 
the computation of dominators, as far as we can tell. A flow graph is reducible if and only if 
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it becomes acyclic when every arc (v, w) such that w dominates v is deleted [33]. Deletion of 
such arcs does not change the dominator tree, since no such arc can be on a simple path from 
s. Deleting such arcs thus reduces the problem of finding a low- high order on a reducible 
flow graph to the same problem on an acyclic graph. Such a graph has a topological order 
(a total order such that if (x, y) is an arc, x is ordered before y) [33] . 

The following lemma provides a way to find the arcs needed to satisfy the low-high 
property on a reducible graph: 

Lemma 4.1. Let T be a tree with the parent property, and let G' be the corresponding derived 
graph. Suppose T has the sibling property in G (or in G'). Ifv^s, then (t(v),v) G A (and 
in A') or v has in-degree at least two in G' . 

Proof. Since T has the sibling property, T = D. Suppose the lemma is false for some v ^ s. 
Since v is reachable from s by a simple path, there is an arc (it, v) such that v does not 
dominate u. Let (it', v) be the derived arc of (it, v). Since the lemma is false for v, u ^ d(v), 
and there is no other arc (w,v) with a derived arc (w',v) such that w' 7^ it'. But then it' 
dominates v, contradicting the sibling property. □ 

Lemma \A. II holds for arbitrary graphs. For reducible graphs, the condition in Lemma H~T1 
is not only necessary but sufficient for a tree T with the parent property to have the sibling 
property: 

Lemma 4.2. Suppose G is reducible. Let T be a tree with the parent property, and let G' be 
the corresponding derived graph. Then T has the sibling property if, for all vertices «/s, 
(t(v),v) G A or v has in-degree at least two in G' . 

Proof. Delete all arcs (x, y) such that y dominates x. This does not change the dominators, 
and it makes the graph acyclic. Suppose the lemma is false. Let it, v be a pair of siblings such 
that it dominates v, with v minimum in some topological order (an order such that if (x, y) 
is an arc, x is ordered before y). There is a path from s to t(v) that avoids u by Corollary 
12.41 Thus if (t(v),v) G A, u does not dominate v, a contradiction. If (t(v),v) A, there is 
an arc (x, v) in G with a derived arc (x' , v) such that x' is a sibling of u and v but x' ^ u. 
By the choice of v, u does not dominate x', so it cannot dominate v, a contradiction. □ 

4.1 Low-high orders on reducible flow graphs 

To find a low-high order on a reducible graph, we delete arcs (x, y) such that y dominates x, 
making the graph acyclic. We then construct for each vertex an ordered list of its children in 
D by processing the vertices other than s in topological order and inserting each vertex into 
its set of siblings in a position determined by the arc or arcs whose existence is guaranteed 
by Lemma 14.11 After building the ordered lists of children, we obtain a low-high order by 
doing a depth- first traversal of D. 

This approach gives us the following algorithm: 

Figure [6] shows how this algorithm works. 

Theorem 4.3. Algorithm 4 is correct. 
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Algorithm 4: Construction of a Low-High Order on a Reducible Flow Graph 

Step 1: Delete every arc (v, w) such that w is an ancestor of v in D, and find the derived 
arc (v',w) of each remaining arc (v,w) with respect to D. 

Step 2: For each vertex v, initialize its list of children C(v) to be empty. Apply the 
following step to each vertex v ^ s in a topological order on G (or on G')\ If 
(d(v),v) G A, insert v anywhere in C(d(v)). Otherwise, find derived arcs (u',v) and 
(w',v) such that v! ^ w'. Insert v just before u' in C(d(v)) if w' is before u' in 
C(d(v)), just after v! otherwise. 

Step 3: Do a depth-first traversal of D, visiting the children of each vertex v in their 
order in C(v). Number the vertices from 1 to n as they are visited. The resulting 
order is low-high on G. 



Proof. After Step 1, G is acyclic and every arc has a derived arc. If (v,w) is an arc with 
derived arc (v',w), v' is an ancestor of v, so there is a path from v' to v. It follows that 
when a vertex v is processed in Step 2, x' is in C(d(v)) for every derived arc {x' , v) such that 
x' 7^ d(v). By the condition in Lemma \A.2\ either (d(v), v) is an arc or there are derived arcs 
(u',v) and (w',v) such that v! ^ w'. Thus the insertion of v into C(v) will succeed. Step 
4 produces a preorder of T. Let v be any vertex other than s. If (d(v),v) ^ A, there are 
arcs (u,v) and (u>,f) in A with derived arcs (u',v) and («/, i;), respectively, such that v is 
ordered between and w', and w' and w' are siblings in T. Since the order is a preorder, v 
is ordered between u and ty. Thus the order is low-high. □ 

When using Algorithm 4 in combination with the dominator certification algorithm (Al- 
gorithm 2), we can omit Step 3 in Algorithm 4, since Step 2 in Algorithm 2 does the same 
tree traversal and numbering. That is, it suffices to represent the low-high order by the 
ordered lists of children produced by Step 2. 

Remark: If we want to verify the dominator tree of a reducible graph but are not interested 
in constructing a low-high order, we can do the verification using Lemma [4.21 Given D, we 
verify that D is a tree with the parent property as in Section [2], compute the derived graph as 
in Section [3] (verifying the correctness of the derived graph using ancestor-descendant tests), 
and verify the condition in Lemma 14.21 The total time for verification by this method is 
0(m). 

It is easy to implement most of Algorithm 4 to run in 0(m) time. In Step 1 we find 
the arcs to be deleted using an 0(l)-time ancestor-descendant test as discussed previously, 
and we find the derived arcs using Algorithm 3. In Step 2, finding a topological order takes 
0(m) time using either successive deletion of vertices of in-degree zero [331 El] or depth- first 
search (43]. Finding the needed arcs in Step 2 takes 0(1) time per arc, for a total of 0(m) 
time. Step 3 takes 0(m) time. The only hard part is constructing the lists of children in 
Step 2. 
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Figure 6: Computation of a low-high order starting with an acyclic derived graph. Ver- 
tices are processed in the topological order (s, d, a, e, g, b, f, c); the vertex processed at each 
application of Step 2 is shown filled. 

4.2 Off-line dynamic list maintenance 

For constructing the lists of children, we need a data structure that maintains a list subject 
to insertions and order queries: given x and y in the list, which occurs first? This is 
the dynamic list maintenance problem. There are solutions to this problem that support 
insertion and order tests in 0(1) time, either amortized or worst-case [13] - Unfortunately, 
these solutions are rather complicated, especially those with an 0(1) worst-case time bound. 
Fortunately, we only need a solution to a special case of dynamic list maintenance, in which 
there are no deletions and, more importantly, the sequence of operations is given off-line in 
an appropriate sense. For this version of the problem there is a simple solution, which we 
now describe. 

Given an initial list with no items, we want to perform off-line an intermixed sequence 
of the following three kinds of instructions, and then number the items in the final list 
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consecutively from 1. 

after (x,y): Return true if x is after y in the current list, false otherwise. Items x and y 
must be in the current list. 

insert(x): Insert x anywhere in the list. 

insert(x,y, test): If test is true, insert x just after y; otherwise, insert x just before y. Item 
y but not x must be in the current list; test is a Boolean combination of true and 
a fixed number of after queries. 

Algorithm 5 gives a simple and efficient solution to this problem. 

Algorithm 5: Off-Line Execution of a Sequence of Insert and After 

Instructions 

Step 1 (off-line): Construct a rooted tree with one non-root vertex for each item ever 
in the list, and a root. The parent of item x is the root if there is an instruction 
insert(x), or y if there is an instruction insert(x, y, test). For each node x, let size(x) 
be the number of nodes in its subtree. 

Step 2 (on-line): Execute the instructions in sequence while maintaining an interval 
[i,j] for the root and for each item currently in the list. Here i and j are integers 
such that i < j. These intervals will be disjoint. Initially the root has interval 
[0, size(root)}. Given a query after(x,y), answer true if the interval for x follows 
that of y, false otherwise. Given an instruction insert(x) such that the root has 
interval replace the interval for the root by — size(x)} and give x the 

interval [j — size(x) + (This corresponds to inserting x first in the list.) Given 
an instruction insert(x,y, test) such that y has interval if test is true replace 
the interval for y by [i, j - size(x)} and give x the interval [j — size(x) + if 
test is false give x the interval + size(x) — 1] and replace the interval for y by 
[i + size(x),j}. (The former corresponds to inserting x after y, the latter to inserting 
x before y.) 

Step 3: After Step 2, the root has interval [0, 0], and each item x has an interval [i, i] for 
some % > 0, i distinct for each x. If item x has interval assign number % to x. 
This numbers the items consecutively from 1 in list order. 



Theorem 4.4. Algorithm 5 is correct. 

Proof. We can view Step 2 as starting with the tree constructed in Step 1, cutting the arc 
(root, x) when insert(x) occurs, and cutting the arc (y, x) when insert(x, y, test) occurs. The 
items currently in the list are exactly the roots of the trees into which the initial tree has 
been cut, excluding the initial root. Each arc cut connects a root with a child. The interval 
of a root contains exactly as many integers as the number of vertices in its current tree, plus 
one if it is the initial root. It follows that each interval [i, j] has i < j, which guarantees that 
the implementation is correct. □ 
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We use Algorithm 5 to implement Step 2 of Algorithm 4 as follows. For each v, we 
construct a sequence of the operations that add vertices to C(v), as follows: For each addition 
of a vertex x to C(v) in an arbitrary position, we construct an operation insert(x). For each 
addition of a vertex x before or after another vertex y depending on whether test is true, we 
construct an operation insert(x,y, test). Each such test is a single after query; there are no 
other queries. We do the list operations using Algorithm 5. At the end of Algorithm 5, the 
items in C(v) will be numbered consecutively in list order. Use of Algorithm 5 eliminates 
the need to use a complicated on-line dynamic list order algorithm. Algorithm 5 may have 
other applications as well. 

5 Low-High Orders from Headers 

In this section we extend the low-high ordering algorithm of Section H] to arbitrary flow 
graphs. To do so we must overcome the circularity caused by cycles. The rough idea 
is to repeatedly contract strongly connected subgraphs to single vertices until no cycles 
exist. Then we apply the algorithm of Section H] to the resulting acyclic graph, but when a 
vertex corresponding to a contracted subgraph is to be processed, we expand the subgraph 
and process its vertices, recursively expanding each such vertex that itself corresponds to a 
contracted subgraph. 

To obtain a sequence of subgraphs to contract, we use the notion of headers. Headers 
are defined with respect to a depth-first spanning tree. Let F be a spanning tree generated 
by a depth-first search of G starting from s, with f(y) the parent of vertex v in F. Every 
cycle in G contains an arc from a descendant to an ancestor in F [43]. Such an arc is called 
a back arc. Number the vertices from 1 to n in reverse postorder with respect to the search, 
and identify vertices by number. (Postorder, also known as finishing order, is the order in 
which the search finishes its vertex visits. See [33].) An arc is a back arc if and only if it 
leads from a larger to a smaller vertex [33]. Deleting the back arcs makes the graph acyclic, 
and makes the vertex order given by the numbering topological [32] . 

The header h(v) of a vertex v is the maximum proper ancestor u of v in F such that 
there is a path from v to u containing only descendants of u in F; if there is no such u, 
h(v) = null. The headers define a header forest H: h(v) is the parent of v in H. Graph G 
is acyclic if and only if all headers are null. Figure [7] illustrates these concepts. 

Headers define a contraction sequence as follows. For each vertex v in decreasing order, 
if v is not a leaf in H, contract the subgraph induced by v and all its children into a single 
vertex v. This subgraph is the interval of v. The interval of v is strongly connected (before it 
is contracted), and all its vertices are descendants of v in F. If all arcs leaving v are deleted 
from its interval, the interval becomes acyclic, and v is the unique vertex with no outgoing 
arc. Thus, if one starts from any vertex in the interval other than v and follows any path in 
the interval, one eventually reaches v without repeating a vertex. See Figure EJ 

Many applications of dominators need headers as well [5J IS1 E21 SS]- Headers can be 
computed in 0(ma(m,n)) time [3Sj or by a more-complicated algorithm in 0(m) time [5]. 
These algorithms require less machinery than the fast algorithms for finding dominators (see 
[6j), but they are not entirely straightforward. It is easy to extend these algorithms to find, 
for each vertex v that is not a root of H, an outgoing arc from v in the interval of h(v), 
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Figure 7: A graph, a depth-first spanning tree (tree arcs are solid, non-tree arcs are dashed) 
with vertices numbered in reverse postorder (in brackets), and its header forest. 
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Figure 8: Contraction sequence and intervals (strongly connected subgraphs) corresponding 
to the header forest in Figure 
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along with the corresponding original arc; indeed, the header-finding algorithms proceed by 
traversing such outgoing arcs backward, doing so by examining the corresponding original 
arcs. We shall assume that a header forest, associated outgoing arcs, and the corresponding 
original arcs are available; if not, they can be computed by one of the cited algorithms. 

Lemma 5.1. Let u be a vertex, and let (v,w) be an arc such that w is a descendant of u in 
H . Then v is a descendant of u in H if and only if v > u. 

Proof. Since all descendants of u in H are also descendants of u in F, w > u. If v > w, 
then (v,w) is a back arc and v is a descendant of w in H and hence a descendant of u in 
H. Suppose v < w. If v > u, v is a descendant of u in F and hence a descendant of u in H. 
Suppose v < u. Then v is not a descendant of u in F, and hence cannot be a descendant of 
u in H. □ 

Lemma 5.2. Let T be a tree with the parent property. Let u 7^ s, and let (v,w) be an arc 
such that w but not v is a descendant of u in H. Then w is u or a sibling of u in T. 

Proof. By the parent property, if x is an ancestor of y in T, then x dominates y. This implies 
x is an ancestor of y in F, so x < y. The set S of descendants of u in H induces a strongly 
connected subgraph of G. By Lemma 12.101 S consists of a set of siblings and possibly some 
of their descendants in T. Since v is not such a descendant, the parent property implies that 
w is one of these siblings. Since u is minimum in S, u is also one of these siblings. □ 

To guarantee the existence of arcs to satisfy the low-high property, we need an analogue 
of Lemma [4.11 For each vertex u 7^ s, we denote by (f'(u),u) the derived arc of (f(u),u), 
which is non-null because the path in F from s to f(u) avoids u. 

Lemma 5.3. Let T be a tree with the parent property. Then T has the sibling property if 
and only if, for each u 7^ s, f{u) = t(u) or there is an arc (y,w) with derived arc (y',w) 
such that w is a descendant of u in H , y < u, and y' 7^ f'{u). 

Proof. If x dominates z, x must be an ancestor of z in F, so x < z. Thus if arc (x, v) has 
a derived arc (x',v), x' < x. Suppose T has the sibling property. Let u 7^ s be such that 
f{u) 7^ t{u). Then f'(u) is a sibling of u in T. By the sibling property, f'(u) does not 
dominate u, so there is a path from s to u avoiding f'(u). Let (y, w) be the first arc on this 
path with w a descendant of u in H. By Lemma [5.11 y < u < w, so w does not dominate 
y, which means that (y,w) has a derived arc (y',w). Since y' is on the path from s to w, 
y' 7^ f'{u). Thus T satisfies the condition in the lemma. 

Conversely, suppose T satisfies the condition in the lemma. Suppose there are siblings v, 
u such that v dominates u. Choose such a pair with u minimum. By Corollary 12.41 there is a 
path from s to t(u) that avoids v. If f(u) = t(u) then v does not dominate u. If f(u) 7^ t(u), 
by the condition in the lemma there is an arc (y,w) with derived arc (y',w) such that w is 
a descendant of u in H, y < u, and y' 7^ f'(u). By Lemma |5.2[ w is u or a sibling of u in T. 
Thus y' is t{u) or a sibling of u and v in T. If y' = t(u), v does not dominate u. If y' is a 
sibling of it, then v does not dominate y' by the choice of u, which implies that v does not 
dominate u. Thus in any case v does not dominate u, so the sibling property holds. □ 
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Like Algorithm 4, the header-based low-high ordering algorithm, Algorithm 6, builds for 
each vertex an ordered list of its children in the dominator tree D and then does a depth-first 
traversal of D to find a low-high order. It inserts the vertices in increasing order into the 
lists of children in a way that gives the low-high property. As part of the insertion process, 
it defines, for each vertex it 7^ s, a derived arc called the pivot arc of u. If the pivot arc of 
u is not (d(u) ,u), it also defines another derived arc called the test arc of u. Of the pivot 
and test arcs for it, one is (/'(it), it), and the other is the derived arc (y', w) of an arc (y, w) 
satisfying Lemma 15.31 The test arc for it is defined just before it is inserted into a list of 
children. The pivot arc for it is defined either just before it is inserted or earlier, when a cycle 
containing it is (implicitly) expanded. The pivot and test arcs determine where to insert it 
in its list of siblings. An example is shown in Figure [H 

Theorem 5.4. Algorithm 6 is correct. 

Proof. Consider the choice of a pivot arc (x', v) for a vertex it 7^ s. We claim that (x', v) is 
the derived arc of an original arc (x, v) such that x < u and v is a descendant of it in H. 
This is immediate if (x', v) is chosen in Step 2a. In Step 2e, v is a descendant of z in H and 
x < u < z, so the choice of (x' , v) as the pivot arc for z satisfies the claim. Also in Step 2e, 
each original arc (p, q) corresponding to an arc on P entering a vertex X, is such that q is a 
descendant of X{ in H but p is not. Lemma 15 . 1 1 implies p < Xj, so the choice of (p ; , q) as the 
pivot arc for x, satisfies the claim. 

If (x',i>) = (d(u),u) in Step 2b, u will satisfy the low-high property. Consider the 
processing of a vertex it such that its pivot arc (x',i;) 7^ (d(u),u). If (x',v) = (/'(it), it), 
/(u) 7^ d(u), so there is an arc (y, w) satisfying Lemma [5731 and the algorithm will successfully 
choose the derived arc (y', w) of such an arc as the test arc for it. One of v and w is it; the 
other is it or a sibling of it in D by Lemma 15.21 Thus each of x' and y' is d(u) or a sibling 
of it in D. Furthermore both are less than it, so they have already been inserted into lists 
of children when it is about to be inserted. Hence the insertion of it is well defined. If 
v = w = it, the insertion position of u guarantees that it satisfies the low-high property. 

It remains to show that it satisfies the low-high property even if one of v and w is not it. 
The choice of additional pivot arcs in Step 2e is what guarantees this. If /(it) = d(u), it will 
satisfy the low-high property, since then it does not matter where it is inserted into C(d(u)). 
Thus suppose /(it) 7^ d(u). Then /'(it) is a sibling of it in D. Consider the arc (x',v) in 
Step 2e (after the conditional swap in Step 2d makes (x',v) 7^ (/'(it), it)). Since v 7^ u, v is 
a sibling of it in D, and z is v or a sibling of v in D, so z is a sibling of it in D. Arc (x', v) 
becomes the pivot arc of z. 

We claim that after all insertions into C(d(u)), u is between /'(it) and z. To prove the 
claim, we consider three cases. If x' = d(u) and (x', 17) is the pivot arc of u, then it will be 
inserted first in C(d(u)), in front of /'(it), and later z will be inserted first, so it is between 
/'(it) and z. If x' = d(u) and (x',v) is the test arc of it, then (/'(it), it) is the pivot arc of u, 
so it will be inserted in front of /'(it) and later z will be inserted first, so again it is between 
/'(it) and z. The third case is x' 7^ d(u). Then it will be inserted between /'(it) and x'. Since 
(x', v) is the pivot arc of z, z will eventually be inserted next to x', leaving it between /'(it) 
and z in this case as well. 

Now consider the vertices z — xo, xi, . . . , x& = u on P. Let Si be the set of descendants 
of Xi in H, and let S be the union of the Si. Let (x, v) be the original arc whose derived arc 
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Algorithm 6: Construction of a Low-High Order using Headers 

Let F be a depth-first spanning tree of G, with vertices numbered in reverse postorder 
and identified by number. Let H be the header forest with respect to F, with associated 
outgoing arcs and corresponding original arcs. 

Step 1: Construct the derived graph G' with respect to the dominator tree D. 

Step 2: For each vertex u, initialize its list of children C{u) to be empty. Apply the 
following steps to each vertex u ^ s in increasing order: 

Step 2a: Let (x' , v) be the pivot arc of it; if u does not yet have a pivot arc, let 
(x',v) = (f(u),u). 

Step 2b: If (x',v) = (d(u),u), insert u first on C(d(u)), completing Step 2. Other- 
wise, proceed to Step 2c. 

Step 2c: If (x',v) ^ (f'(u),u), let the test arc (y',w) of u be (f'(u),u); otherwise, 
let the test arc of u be the derived arc (y 1 , w) of an arc (y, w) with y < u, w a 
descendant of u in H, and y' ^ f'(u). 

Step 2d: If x' = d(u), insert u first in C(d(u)). Otherwise, insert u just before 
x' in C(d(u)) if y' = d(u) or y' precedes x' in C(d(u)), just after x' otherwise. 
Swap (x',v) and (y',w) if necessary so that (y',w) = (f'(u),u). If v = u, this 
completes Step 2; otherwise, proceed to Step 2e. 

Step 2e: Let z be the child of u in H that is an ancestor of v. Make (x', v) be the 
pivot arc of z. Find a path P of vertices z = Xq, x\, . . . , x^ = u in the interval of u 
by starting at z and following outgoing arcs in the interval until reaching u. For 
each vertex Xi other than z and u on P, find the original arc (p, q) corresponding 
to the arc entering Xj on P, and let the pivot arc of Xi be the derived arc (p', q) 
of (p, g). 

Step 3: Do a depth-first traversal of D, visiting the children of each vertex v in their 
order in C{y). Number the vertices from 1 to n as they are visited. The resulting 
order is low-high on G. 
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Figure 9: Computation of a low-high order (inside the brackets) of the flow graph of Figure 
using the intervals of Figure [HJ When vertex d is processed, Algorithm 6 sets (b, d) as 
the pivot arc in Step 2a and (a, c) as the test arc in Step 2c. In Step 2e it finds the path 
P = (c, h, d) (shown with bold arcs) inside the interval of d and sets (c, g) as the pivot arc of 
h, which is the original arc corresponding to (c, h). When vertex h is processed, Algorithm 
6 sets (d, h) as the test arc in Step 2c. In Step 2e it finds the path P = (g, I, k, h) (shown 
with bold arcs) inside the interval of h and sets (g, I) and (/, k) as the pivot arcs of I and k 
respectively. 
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is (x', v). There are w-avoiding paths from s to all vertices in S, via the path in F from s to 
x' followed by (x', v) followed by a path among vertices in S. Thus u dominates no vertex 
in S. But d(u) must dominate all vertices in S, since otherwise there would be a path from 
s to it avoiding d(u). Thus all vertices in S are descendants of d(u) in D. 

We claim that S consists of a set of siblings of u in D and possibly some of their de- 
scendants. This is true of So, since by Lemma [2. 101 Sp consists of a set of siblings in D and 
possibly some of their descendants, Xq must be one of these siblings since it is minimum in 
So, and z = x$ is a sibling of it. Suppose the claim is false. Let Xi be minimum such that 
some vertex in Si is a descendant of a sibling of u in D but that sibling is not in S. By 
Lemma 12.101 Si consists of a set of siblings in D and possibly some of their descendants. 
Let (p,q) be the original arc corresponding to the arc entering Xi on P. Then p is in £i_i. 
By the choice of Xi, p is a descendant in D of a sibling b of u that is in S. Either q is a 
descendant of b in D, in which case all vertices in Si are descendants of b in D, or g is not 
a descendant of 6. In the latter case, the parent property implies that q is a sibling of b and 
hence of u, and S{ consists of a set of siblings of b and hence of u, and possibly some of their 
descendants. We conclude that there is no such x^, verifying the claim. 

Finally we claim that all of the siblings of it in S are on the same side of it in C(d(u)) 
as z = xq. This implies that it has the low-high property, because it will be between /'(it) 
and p' , where (p', it) is the derived arc of the original arc (p, it) corresponding to the arc 
entering u on P. Suppose the claim is false for some sibling of it in S. Let b be the minimum 
such sibling. Let the pivot arc of b be the derived arc (a',c) of original arc (a, c). Either 
(a', c) = (x' , v), or a' and c are in S. In the former case, if x' = d(u), b will be inserted at the 
front of C(d(u)) sometime after z was inserted at the front, so b will be on the same side of 
it as z; if x' is a sibling of it, b will be inserted next to x' sometime after z was inserted next 
to x' , so again b will be on the same side of it as z. In the latter case, by Lemma [5.21 c is a 
sibling of b and hence of it, and since a' is in S, a' is also a sibling of it. Furthermore a' < b, 
so a' is on the same side of u as z by the choice of b. The insertion of b next to a' puts it on 
the same side as well. □ 

Theorem 5.5. A tree with the parent property has the sibling property, and hence is the 
dominator tree, if and only if it has a low-high order with respect to G. 

Proof. Immediate from Theorems 12.91 and 15.41 □ 

Excluding the computation of headers and associated information, it is straightforward 
to implement Algorithm 6 to run in 0(m) time. To find test arcs in Step 2c, we compute, 
for each vertex u ^ s, two derived arcs (x' , v) and (y', w) with v and w descendants of it in 
H, x' 7^ y 1 , and x' and y 1 minimum, if two such arcs exist; otherwise, /(it) = d(u). We can 
do this by processing the vertices of H bottom-up (from leaves to roots). This takes 0(m) 
time. We do the insertions into the lists of children using the off-line method developed in 
Section S3 

We can if we wish run Algorithm 6 on the derived graph instead of the original graph. 
This is appealing if the header information is not given but must be computed, since it 
simplifies the structure of the strongly connected subgraphs and simplifies Step 2. In the 
derived graph, every arc leads from a vertex to a child or sibling in D, so the vertex set 
of every strongly connected subgraph consists of a set of siblings in D. Furthermore every 
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such subgraph with at least two vertices has at least two entry vertices from s. To run 
Algorithm 6 on the derived graph, we begin by computing the derived graph G'. Then we 
do a depth-first search of G' to generate a depth-first spanning tree F and to number the 
vertices in reverse preorder. Next we construct the header forest of G' with respect to F, 
along with associated in-trees and corresponding original arcs. Finally, we run Steps 2 and 
3, ignoring the distinction between original arcs and derived arcs: in G', every arc is its own 
derived arc. 

Remark: If we want to verify the dominator tree of an arbitrary graph but are not interested 
in constructing a low-high order, we can do the verification using Lemma 15.31 Given D, we 
verify that D is a tree with the parent property as in Section [21 compute the derived graph 
as in Section [3j (verifying the correctness of the derived graph using ancestor-descendant 
tests), construct the header forest (for either the original or derived graph) and verify the 
condition in Lemma 15.3} which can be done by processing the vertices of H from leaves to 
roots. The total time for verification by this method is 0(m). This method assumes that 
the headers are correct. To verify that the headers are correct, we verify for each u ^ s that 
all its children in H are descendants of u in F, that the interval of u is strongly connected, 
and that it becomes acyclic when u is deleted. This also takes 0{m) time. 

6 Low-High Orders from Semi-Dominators 

6.1 Low-high orders from independent spanning trees 

In this section we develop an alternative algorithm for finding a low-high order in an arbitrary 
graph. Instead of header information, the algorithm uses semi-dominator information. This 
information is computed by the fast algorithms for finding dominators (2j El [35] , making it 
easy to extend these algorithms to find not only the dominator tree, but a low-high order as 
well. The algorithm has two steps. The first step uses the semi-dominator information to 
build two independent spanning trees. The second step uses two independent spanning trees 
to find a low-high order. Since the two steps are independent and the second step requires 
no new ideas and is much easier to prove correct, we begin with it. 

Let B and R be two independent spanning trees: for each vertex v, the paths in B and 
R from s to v have only the dominators of v in common. We denote by b(v) and r(v) the 
parent of v in B and R, respectively. We begin by slightly modifying B and R: for each 
vertex v ^ s, if (d(v),v) G A we replace b(v) and r(v) by d(v). Then we find the derived 
arcs of the arcs in B and R. Let G' be the subgraph whose vertex set is V and whose arcs 
are the derived arcs of those in B and R. Let B' and R' be the subgraphs of G' defined by 
the derived arcs of B and R, respectively. See Figure [TUl 

Lemma 6.1. Subgraphs B' and R' are independent spanning trees in G' . 

Proof. Any path from s to v in B or R contains d(v), so if (d(v), v) G A, replacing b(v) and 
r(v) by d(v) leaves B and R trees. Furthermore such replacements only eliminate vertices 
from paths in B and R, so B and R remain independent. Similarly, for any vertex v ^ s, v 
does not dominate b(v) or r(v), so every arc in B and R has a derived arc. If v ^ s, b'(v) 
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Figure 10: A flow graph, its dominator tree (with vertices arranged in a low-high order), and 
two independent spanning trees; the derived graph and two independent spanning trees. 



27 



Algorithm 7: Construction of a Low-High Order Given Two Independent 

Spanning Trees 

Let B and R be independent spanning trees. 

Step 1: For each vertex v ^ s, if (d(v),v) G A, replace b(v) and r(v) by d(v). 

Step 2: Compute the derived arcs of the arcs in B and R, and let the resulting derived 
graph be G'. Let B' and R', respectively, be the spanning trees in G' whose arcs are 
the derived arcs of B and R, respectively. 

Step 3: For each v ^ s, initialize its list of children C(v) to be empty. 

Step 4: If G' contains only one vertex v ^ s, insert v anywhere in C(s). Otherwise, let 
v be a vertex whose in-degree exceeds its out-degree in G' . Assume v is a leaf in R'; 
proceed symmetrically if v is a leaf in B' . If v is not a leaf in B', let w be its child 
in B', and replace b'(w) by b'{y). Delete v, and apply Step 4 recursively to insert 
the remaining vertices other than s into lists of children. If b'{v) = d(v), insert v 
anywhere in C(d(v)); otherwise, insert v just before b'(v) in C(d(v)) if r'{v) is before 
b'(v) in C(d(v)), just after b'{v) otherwise. 

Step 5: Do a depth-first traversal of D, visiting the children of each vertex v in their 
order in C(v). Number the vertices from 1 to n as they are visited. The resulting 
order is low-high on G. 



(r'(v)) is on any path from s to b(v) (r(v)), and hence on the path from s to v in B (R). It 
follows that replacing all the arcs in B and R by their derived arcs produces two independent 
spanning trees in G'. □ 

As in Algorithms 4 and 6, the tree-based low-high ordering algorithm, Algorithm 7, 
builds ordered lists of the children in D of each vertex h/s. It uses the arcs in B' and R' 
to determine the insertion positions. It inserts vertices in an order determined recursively, 
unlike the iterative orders used in Algorithms 4 and 6 (topological order in Algorithm 4, 
reverse postorder in Algorithm 6). 

Figure [11] illustrates how this algorithm works. 

Theorem 6.2. The vertex order computed by Algorithm 7 is low-high on G' and hence on 
G. 

Proof. We claim that Step 4 maintains the invariant that B' and R' are independent spanning 
trees rooted at s, and for every v ^ s, either b'{y) = r'(v) = d(v), or b'(v), r'(v), and d(v) are 
all distinct. The claim is true before any vertices are deleted. Let v be a vertex chosen for 
deletion. If v has no outgoing arcs, deletion of v preserves the invariant, since v dominates 
no vertices. The choice of v guarantees that if b'(v) = r'(v) = d(v), v has no outgoing 
arcs. Thus suppose b'(v), r'(v), and d(v) are distinct, and that b'(w) = v; the argument 
is symmetric if r'(w) = v. The choice of v guarantees that r'(w) ^ v, which implies that 
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Figure 11: Computation of a low-high order starting from two independent spanning trees 
of the derived graph. The vertex removed at each application of Step 4 is shown filled. 
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v dominates no vertices. In particular, v ^ d(w), so b'(v), v, and w are siblings in D. It 
cannot be the case that r'(w) = b'(v), for then the paths in B' and E! from s to w would 
share b'(v), which does not dominate w. Thus r'(w), v, and b'(v) are distinct siblings in D. 
It follows that replacing b'(w) by b'(v) and deleting v preserves the invariant. 

Next we claim that Step 4 runs to completion; that is, there is always a vertex v to choose 
in Step 4. In G' the total in-degree equals the total out-degree. Since s has in-degree zero 
and positive out-degree, at least one vertex v ^ s has in-degree exceeding its out-degree and 
hence is a candidate for v. Since v has in-degree one or two, its out-degree is zero or one, 
which means it is a leaf in B' or R' . 

Finally, we claim that the computed order is low-high. This is immediate if G' has two 
vertices. Suppose this is true if G' has k > 2 vertices. Let G' have k + 1 vertices and let 
v be the vertex chosen for deletion. The insertion position of v guarantees that v has the 
low-high property. All vertices in G' after the deletion of v have the low-high property in the 
new G' by the induction hypothesis, so they have the low-high property in the old G' with 
the possible exception of w, one of whose incoming arcs differs in the old and the new G 1 . 
Suppose b'ivS) differs; the argument is symmetric if r'(w) differs. By the argument above, 
v, w, b'(v), and r'(w) are distinct siblings in D. Since w has the low-high property in the 
new G', it occurs in C(d(v)) between r'(w) and b'(v). Insertion of v next to b'(v) leaves w 
between r'(w) and v, so it has the low-high property in the old G' as well. □ 

Using Algorithm 5 to implement Step 4, it is straightforward to implement Algorithm 7 
to run in 0(n) time. 

6.2 Independent spanning trees from semi-dominators 

Now we turn to the problem of finding two independent spanning trees on which to run 
Algorithm 7. We need to define semi-dominators and related concepts. These are defined 
with respect to a vertex numbering given by depth-first search, but in contrast to the reverse 
postorder numbering used in Section HI this numbering is preorder, the order in which the 
vertices are first visited by the search. The tree construction algorithm does not actually use 
any vertex numbering; we introduce the preorder numbering just for definitions and analysis. 

Let F be a depth-first spanning tree of G rooted at s, with vertices numbered from 1 
to n as they are first visited by the search. Identify vertices by number. We shall use the 
following basic lemma about depth-first search repeatedly: 

Lemma 6.3. (Path Lemma |43]) If v and w are vertices such that v < w, then any path 
from v to w contains a common ancestor of v and w in F. 

A path from u to v is high if all its vertices other than u and v are higher than both u 
and v. If v ^ s, the semi-dominator sd(v) is the minimum vertex u such that there is a 
high path from u to v. Since f{v) is a candidate, sd(v) < f(v). By Lemma 16731 sd(v) is a 
proper ancestor of v in F. Indeed, sd(v) is the ancestor u of v in F closest to s such that 
there is a path from u to v avoiding all other vertices on (the path in F from u to 

v). Since there is a path from s to « avoiding all vertices on F[sd(y),v] except sd(v) and 
v, d(v) < sd(v). The relative dominator rd(v) is the vertex x on F(sd(v),v] (the path in 
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F from a child of sd(v) to v) such that sd(x) is minimum, with a tie broken in favor of the 
smallest x. 

Semi-dominators and relative dominators provide a simple way to compute dominators: 

Lemma 6.4. ([.35]) Let «/s. If sd(v) = sd(rd(v)), then d(v) = sd(v); otherwise, d(v) = 
d(rd(v)). 

By applying the recurrence in Lemma 16.41 to the vertices in increasing order, one can 
find the dominators in 0(n) time. This is the last step of the Lengauer-Tarjan [35] and 
Buchsbaum et al. [6] algorithms for finding dominators. The former uses path compression 
to compute semi-dominators and relative dominators; the latter uses path compression and 
additional techniques. 

Semi-dominators also provide a necessary and sufficient condition for a tree with the 
parent property to have the sibling property: 

Lemma 6.5. A tree T with the parent property has the sibling property, and hence is D, if 
and only if, for every v ^ s, f{y) = d(v) or sd{y) < f'iy), where (f'(v), v) is the derived arc 
of (/(f), v) with respect to T. 

Proof. Suppose T has the sibling property. Then T = D by Theorem 12.51 Let v ^ s be a 
vertex such that f(v) ^ d{v). Then f'(v) is a sibling of v in T. By the sibling property, 
there is an /'(^-avoiding simple path P from s to v. Let u be the last vertex on P less 
than v. The part of P from u to v is a high path, so sd(v) < u. By Lemma 16.31 u is a 
proper ancestor of v in F and hence an ancestor of f(v). Suppose u > f'(v). Then there 
is a path from s to f(v) that avoids f'(v), consisting of the part of P from s to u followed 
by F[u, f(v)]. But f'(v) dominates f{v), so there is no such path. Thus it must be the case 
that u < f'{v), which implies sd(v) < f'(v). Hence the condition in the lemma holds. 

To prove the converse, suppose that T does not have the sibling property. Choose u and 
v with v minimum such that u and v are siblings in T and u dominates v. Then u is an 
ancestor of f(v) in F. Furthermore u dominates f(v); otherwise, it would not dominate 
v. By the parent property, f{v) is not a descendant of v in T, for then v would dominate 
f(v). It is not a proper ancestor of u in T, for then f{v) would dominate u. Nor can it 
be a descendant in T of a sibling x of u and v, for then x < f(v) < v and x dominates 
f(v), which implies that one of x and u dominates the other, contradicting the choice of v. 
The only remaining possibility is that f{y) is a descendant of u in T, possibly u itself. This 
implies f'(v) = u. It cannot be the case that sd(v) < u, for then F[s, sd(v)] would avoid u, 
as would the high path from sd(v) to v, so u would not dominate v. Hence sd(v) > u, and 
v violates the condition in the lemma. □ 

If the semi-dominators are available, we can use Lemma 16.51 to verify that a tree with 
the parent property has the sibling property and hence is D. But we know of no simple 
0(m)-time way to verify the correctness of the semi-dominators. We thus prefer to use 
a low-high order to verify the sibling property, since it gives a complete solution to the 
dominator verification problem. 

Our algorithm to construct two independent spanning trees requires as input a depth-first 
spanning tree F along with the corresponding semi-dominators, relative dominators, and, 
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for each vertex v ^ s, an arc (g(v), v) that is last on some high path from sd(v) to v. It may 
happen that g(v) = f(v), but only if f(v) = d(v). The converse need not be true. 

It is straightforward to augment the computation of semi-dominators to compute last 
arcs as well; indeed, such a computation is implicit in the computation of semi-dominators. 
The increase in running time is at most a constant factor. 

To prove that the tree-construction algorithm is correct, we need the following technical 
lemma about semi-dominators: 

Lemma 6.6. Let v ^ s be a vertex such that g(v) > v, and let a be the nearest common 
ancestor of v and g{v). Then there is a vertex w on F(a,g(v)} such that sd(w) = sd(v). 

Proof. Let P be a high path from sd(v) via g(v) to v, and let w be the smallest vertex on 
this path other than sd(v) and v. We prove that w satisfies the lemma. Since w > v > a, w 
is not an ancestor of a in F. The part of P from sd(v) to w is a high path, so sd(w) < sd(v). 
Any high path to w can be extended to a high path to v by adding the part of P from w to 
v, so sd(w) > sd(v). Hence sd(w) = sd(v). If w — g(v), w satisfies the lemma. Otherwise, 
w < g(v), so by Lemma [6.31 there is a common ancestor of w and g(v) in F on the part of 
P from w to g(v). Since w is smallest on this part of P, it must be this ancestor. Thus w 
satisfies the lemma. □ 

Here is our algorithm to construct two independent spanning trees: 



Algorithm 8: Construction of Two Independent Spanning Trees B and R 

For each vertex v ^ s in increasing order, choose one of f(v) and g(v) to be the parent b(v) 
of v in B and the other to be the parent r(v) of v in R, as follows: if sd(v) = sd(rd(v)) 
or b(rd(v)) = f(rd(v)), set b(v) = g{v) and r(v) = f(v); otherwise, set b{v) = f{v) and 
r( v ) = g(v). 



We call a vertex v ^ s blue if b(v) = g(v) and red otherwise. An equivalent way to 
state Algorithm 8 is: color v blue if sd(v) = sd(rd(v)) or rd(v) is red; color v red otherwise. 
Vertex s has no color. Figure H21 gives an example of the construction. 

Interestingly, Algorithm 8 does not use dominators at all, although we can simplify the 
coloring rule with their use, since sd(rd(v)) = d(v): color v blue if sd(v) = d(v) or rd(v) is 
red; color v red otherwise. 

Although Algorithm 8 is simple, its correctness proof is quite intricate. We first prove 
that B and R are acyclic and hence spanning trees rooted at s, and then that they are 
independent. Both parts of the proof require some groundwork. We begin with two lemmas 
that relate the colors of certain vertices. 

Lemma 6.7. If v and w are vertices such that v is an ancestor of w in F, sd(v) = sd(w), 
and sd(x) > sd(v) for every x on F[v,w], then v and w are the same color. 

Proof. The hypothesis of the lemma and the definition of rd imply rd(v) = rd(w). The 
lemma follows from the equality sd(v) = sd(w) and the coloring rule. □ 
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Figure 12: Construction of two independent spanning trees B and R. Vertices are numbered 
in preorder with respect to a depth-first spanning tree F shown with solid arcs; dashed arcs 
are not in F. Numbers inside the brackets correspond to sd(v) and rd(v). 
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Lemma 16.71 implies that B and R do not change if we define rd(v) to be any vertex x 
on F(sd(v),v] with sd(x) minimum, since by the lemma every such x has the same color. 
Choosing x smallest simplifies some of our proofs, however. 

Lemma 6.8. Let x, y, and z be vertices other than s such that 

(i) x is an ancestor of y and z in F and y and z are related in F; 

(ii) sd(x) < sd(y) < sd(z) < x; 

(Hi) sd(v) > sd(x) for all v on F[mm{y, z}, max{y, z}] 
(iv) x and z are the same color. 
Then y is the same color as x and z. 

Proof. Suppose the lemma is false. Let x, y, z be three vertices that violate the lemma 
and such that x is minimum. We shall show that rd{y) < x and rd(y), rd(z), x is a triple 
violating the lemma, contradicting the choice of x, y, z. 

By (i) and (ii), x is a candidate for rd(z), so sd(rd(z)) < sd(x). Also by (ii), sd(x) < 
sd(z), so sd(rd(z)) < sd(z). By the coloring rule, rd(z) and z have different colors. By (iv), 
rd(z) and x have different colors. If sd(rd(z)) = sd(x), rd(z) and x would have the same 
color by Lemma l67T| since they do not, sd(rd(z)) < sd(x). By (iii), rd(z) is a proper ancestor 
of both y and z in F. Thus rd(z) is a candidate for rd(y). We claim sd(rd(y)) ^ sd(rd(z)). 
Suppose by way of contradiction that sd(rd(y)) = sd(rd(z)). By Lemma 16.71 rd(y) and 
rd(z) are the same color. Since sd(rd(z)) < sd(x), (ii) implies sd(rd(y)) < sd(y) and 
sd(rd(z)) < sd(z). By the coloring rule, y and z are the same color, a contradiction. Thus 
sd(rd(y) ^ sd(rd(z)). Since rd(z) is a candidate for rd(y), sd(rd(y)) < sd(rd(z)) and rd(y) 
is an ancestor of sd(z) in F. 

Since rd(y) is an ancestor of sd(z) in F, it is a proper ancestor of both rd(z) and x. In 
particular, rd{y) < x. Also, rd{x) and x are both ancestors of y (and z) in F, and hence 
related. Thus (i) holds for rd(y), rd(z), x. We have sd(rd(y)) < sd(rd(z)) < sd(x) < rd(y), 
the last inequality following from (ii): sd(x) < sd(y) < rd(y). Thus (ii) holds for rd(y), 
rd(z), x. Since rd(z) and x are proper descendants of sd(y) and ancestors of y, (iii) holds 
for rd(y), rd(z), x. Since sd(rd(y)) < sd(rd(z)) < sd(x) < sd(y) (the last inequality by 
(ii)), the coloring gives rd(y) and y different colors. Since x and y have different colors by 
assumption, rd(y) and x have the same color, so (iv) holds for rd(y), rd(z), x. Finally, we 
showed above that rd(z) and x have different colors, so rd(y), rd(z), a; is a triple violating 
the lemma. □ 

We use Lemmas 16. 3[ 16. 6[ 16 .7\ and 16.81 to prove that B and R are acyclic and hence 
spanning trees rooted at s. 

Theorem 6.9. Both B and R are spanning trees rooted at s. 

Proof. Suppose not. Then B or R contains a cycle. We shall construct a triple x, y, z 
violating Lemma 16. 8\ yielding the theorem by contradiction. Let x be the minimum vertex 
on the cycle. Then i^s (since s contains no incoming arcs), so sd(x) < x. Since f(x) < x, 
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arc (g(x),x) is on the cycle. By Lemma |6.3[ all vertices on the cycle are descendants of 
x in F. Let u be the first vertex after x on the cycle such that sd(u) < x and x and 
u are the same color. Vertex a; is a candidate for u, so u is well-defined. Since x and 
u are the same color, (g(u),u) is on the cycle. If g(u) < u, then sd(u) = g{u) > x, 
contradicting the choice of u. Thus g(u) > u. Let z be a vertex satisfying Lemma 16.61 for 
u: sd(z) = sd(u) and z is on F(a,g(u)}, where a is the nearest common ancestor of u and 
g{u) in F. Since z is a proper descendant of a, and a is a descendant of x, z is a proper 
descendant of x. Since 5^(2;) = sd('u) < x, x is a candidate for both r<i(2:) and rd{u). Thus 
max{ s(i(rd(z)), sd(ni(n))} < sd(x). Every descendant w of x that is an ancestor of either 
u ot z has a high path to x through descendants of z, so sd(w) > sd(x). It follows that 
rd(z) = rd(u) and that this vertex is an ancestor of x in F. Hence the coloring rule colors z 
the same as u, and x. That is, (iv) in Lemma [6.81 holds. 

On the part of the cycle from x to g(u), let v be the last vertex whose predecessor on the 
cycle is not a descendant of z in F; that is, all vertices on the cycle from v to g(u) (inclusive) 
are descendants of z, but not v. There must be such a vertex since g(u) is a descendant of 
z in F but x is not. Since v follows x on the cycle and precedes u, the choice of u implies 
sd(v) > x. Thus it cannot be the case that v = z, since then sd(v) = sd(u) < x. Thus 
v 7^ z. Since v is a descendant of z in F, it is a proper descendant. Since its predecessor 
on the cycle is not a descendant of z, its predecessor is not f(v), but g{v). Thus v has the 
same color as x and z. The nearest common ancestor of v and g(v) in F is a candidate for 
sd(v). Since z is an ancestor of v but not g(v), this nearest common ancestor is less than z, 
which implies sd(v) < z. As observed above, the choice of u implies sd(v) > x. Thus sd(v) 
is a descendant of x and a proper ancestor of z in F. 

Let y = rd{v). Since 2 is an ancestor of v, z is a candidate for y, so sd(y) < sd(z) < x < 
sd(v). The coloring rule gives y the color not given to v, x, and z, hence y is not x or z. We 
showed above that 1/ z. Vertex y is a descendant of x in F, as is z. Furthermore y and 
z are related in F, since both are ancestors of v. Hence (i) in Lemma 16.81 holds. Since z is 
a candidate for rd(v) = y, it cannot be the case that sd(y) = sd(z), or y and z would have 
the same color by Lemma [6.71 Hence sd(y) < sd(z). For every vertex w on F(x,v], there 
is a high path from w to x, consisting of F(w,v] followed by the part of the cycle from v 
to x. It follows that sd(w) > sd(x) for every such w. Thus (iii) in Lemma [6.81 holds. Since 
sd(w) > sd(x) for every vertex w on F[x,y] and x and y are different colors, sd(x) ^ sd(y) 
by Lemma |6.7[ so sd(x) < sd(y). We have previously established the other inequalities in 
(ii) of Lemma I6.8[ so (ii) holds as well. We conclude that x, y, z is a violating triple. □ 

To prove that B and R are independent, we need two more definitions and one more 
technical lemma. Let v be a blue (red) vertex. Since s is uncolored, v 7^ s. The pseudo- 
semi- dominator psd(v) of v is the nearest ancestor of v in B (R) that is less than v. Such 
a vertex exists since B and R are spanning trees rooted at s. By Lemma [6.3[ psd(v) is an 
ancestor of both v and g(v) in F. (Arc (g(v), v) is in the tree defining psd(v).) Furthermore 
psd(v) > sd(v), since the path from psd(v) to v in the tree defining psd(v) is a high path. 
Thus psd(v) is on F[sc?(u), a], where a is the nearest common ancestor of v and g(v) in F. 
The pseudo-relative- dominator prd{v) of u is the vertex x on F(psd(f),v] such that sd(x) is 
minimum, with a tie broken in favor of the smallest x. If prd{v) 7^ rd(v), then psd(v) > sd(v) 
and rd(f) is on F(sd(u),psd(u)]. See Figure [T3"l 
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Figure 13: A situation where sd(v) 7^ psd(v) and rd(v) 7^ prd(v), for the blue vertex v = 9; 
we have sd(9) = 5, rd(9) = 6, psd(9) = 7 and prd{9) = 8. Vertices are numbered in preorder 
with respect to a depth-first spanning tree shown with solid arcs; dashed arcs are not in the 
tree. Numbers inside the brackets correspond to sd(v) and rd(v). 
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Lemma 6.10. For any vertex «^s, either psd(v) = sd(v), or sd(prd(v)) < sd(v) and v 
and prd(v) are different colors. 

Proof. Suppose the lemma is false; let v be the largest vertex that violates the lemma. We 
prove by a case analysis that the lemma holds for v, a contradiction. The last case produces 
an instance of Lemma 16.81 

By the choice of v, psd{v) > sd(v). This implies g{v) > v: if g{v) < v, psd{v) = g{v) = 
sd(v). Let a be the nearest common ancestor of v and g(v) in F. Assume rd(v) is a proper 
descendant of a and sd(rd{v)) < sd{y). Since psd{y) is an ancestor of a by Lemma l6\3l rd{y) a 
proper descendant of a implies prd (v) = rd(v). Furthermore sd(prd(v)) = sd(rd(v)) < sd(v), 
so the coloring rule colors v and prd(v) = rd(v) differently, which means that the lemma 
holds for v. Hence we can assume that rd(v) is an ancestor of a or sd(rd(v)) = sd(v). 

Each vertex u on F(a,g(v)] has a high path to v, so sd(u) > sd(v). By Lemma T6.6I there 
is such a vertex u on F(a, g{v)} with sd{u) = sd(v). Since u is on F(a, g(v)], u > v. We prove 
that u and v have the same color. If rd(v) is an ancestor of a, then rd(u) = rd(v), so the 
coloring rule colors u and v the same. Suppose on the other hand that sd(rd(v)) = sd(v). 
Then v is blue by the coloring rule. Also, sd(w) > sd(v) for every w on F(sd(v), a]. It 
follows that sd(rd(u)) = sd(v) = sd(u), so u is also blue by the coloring rule. By the 
previous paragraph these are the only cases. 

Suppose u and v are blue; the symmetric argument applies if they are red. Let w be the 
nearest ancestor of g(v) in B such that w but not b(w) is a descendant of u in F. There is 
such a w since g{y) is a descendant of u in F but s is not. Vertex w is blue, since if w ^ u, 
f(w) is a descendant of u in F, so b(w) = g{w) by the choice of w. Also w > u > v. Since v 
is the maximum vertex that violates the lemma, the lemma holds for w. 

There is a high path from w to v, so sd(w) > sd(v). Assume psd(w) = sd(w) = sd(v). 
Then psd(w) < v and all vertices on B(psd(w), w] are no less than w and hence no less than 
v. This is also true of the vertices on B(w, g(v)], since they are all descendants of u, which 
is greater than v. It follows that psd(v) = psd(w). But then psd(v) = sd(v), so the lemma 
holds for v. Hence we can assume that psd(w) > sd(w) or sd(w) > sd(v). 

We prove that prd{w) is red, and that sd{prd{w)) < sd(v). If sd(w) = sd(v), both are 
true since psd(w) > sd(w) by the previous paragraph, and the lemma holds for w, which 
is blue. Thus assume sd{w) > sd{y). By Lemma [6731 psd{w) is an ancestor in F of every 
vertex on B[psd(w),w], including w and g{w). Since w but not g{w) is a descendant of 
u in F, u must be on F(psd(w), w], making u a candidate for prd{w). Thus sd(rd{w)) < 
sd(prd(w)) < sd{u) = sd(v) < sd(w), so rd{w) is red by the coloring rule, since w is 
blue. But then prd(w) is also red, since psd(w) = sd(w) implies prd(w) = rd(w), and 
psd(w) > sd(w) implies prd(w) is red since the lemma holds for w. It cannot be true that 
sd(prd(w)) = sd(v), for then sd(prd(w)) = sd(v) = sd(u), making prd(w) and u the same 
color by Lemma [6 .7\ a contradiction. Thus sd(prd(w)) < sd(v). 

If prd(v) = prd(w), then prd(v) = prd(w) is red and sd(prd(v)) = sd(prd(w)) < sd(v) 
by the paragraph above, so the lemma holds for v. Thus assume prd(v) ^ prd(w). Every 
vertex x on F(a, w] has a high path to v via the path in F to w followed by the path in B 
from w to v, so sd(x) > sd{y). Since sd(prd{w)) < sd(v), prd{w) is not on F(a,w], which 
means it is an ancestor of a in F, and psd(w) is a proper ancestor of a in F. This implies 
psd{v) = psd(w), since psd{w) < a < v and every vertex on B(psd(w), g(w)} is greater 
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than w, which is greater than v. Since prd(v) ^ prd(w), prd(v) must be on F(a,v] and 
sd(prd(v)) < sd(prd(w)). But sd(prd(w)) < sd(v), so sd(prd(v)) < sd(v). It remains to 
prove that prd{v) is red. 

Since sd{rd(v)) < sd(prd(v)) < sd(v), rd{y) is red by the coloring rule. If sd(rd(v)) = 
sd(prd(v)), then prd{y) is red by Lemma 16771 Thus assume sd(rd(v)) < sd(prd(v)). We 
prove that x = rd(v), y = prd(v), z = prd{w) satisfies the hypothesis of Lemma [6781 Indeed, 
sd(rd(v)) < sd(prd(v)) < sd(prd(w)) < sd(v) < rd(v), so (ii) in the hypothesis of Lemma 
16.81 holds. Since sd(rd(v)) < sd(prd(v)), rd(v) is an ancestor of psd{v) = psd(w) and hence 
an ancestor of both prd{v) and prd{w). Also, prd{v) and prd{w) are related since prd{w) is 
an ancestor of a. Thus (i) holds. Since prd(v) and prd(w) are ancestors of v and descendants 
of rd(v), (iii) holds by the definition of rd(v). We proved above that rd(v) and prd(w) are 
red, so (iv) holds. By Lemma [6.81 prd(v) is red. Thus the lemma holds for v. □ 

Theorem 6.11. Trees B and R are independent. 

Proof. The proof is like that of Lemma 16.101 we assume the lemma is false and work our 
way through a number of cases, each of which leads to a contradiction. Two cases produce 
instances of Lemma 16.81 

Thus suppose the lemma is false. Let v be minimum such that B[s, v] and R[s, v] share a 
vertex other than a dominator of v. By the argument in the proof of Theorem 12 .81 B[d(v), v] 
and R[d(v),v] share a vertex w other than v and d(v). Let xb and xr be the minimum 
vertices on B[w,v] and R[w,v], respectively. Assume xb < xr] the symmetric argument 
applies if x R < x B - By Lemma 16731 v is a descendant of both xb and xr in F, so xb is an 
ancestor of xr in F. 

Let u be a vertex of minimum sd(u) on F(xr,v}. We investigate the properties of 
u. First we prove that sd{u) is a proper ancestor of xb in F. Since B[d(v),v] is simple, 
xb 7^ d(v), which implies that xb does not dominate v; if it did, it would equal d(v). But 
d{y) dominates xb, since it dominates v. Thus d{v) is a proper ancestor of xb in F, and 
d(v ) < Xb- Assume sd(u) > xb- Lemma IST^l and the definition of u imply that d(u) = sd(u). 
Furthermore an induction on x for x G F[u,v] using Lemma 16.41 shows that d(x) > sd(u). 
Thus d{y) > sd(it) > x^, a contradiction. We conclude that sd(u) < xb, and sd(u) is a 
proper ancestor of xb in F. 

Second we prove that psd(u) is also a proper ancestor of xb in -F. This is immediate if 
psd(u) = sd(u). If not, sd(u) < psd(u), which implies by the choice of u that prd(u) is an 
ancestor of xb in F; hence psd(u) is a proper ancestor of xb in F. 

Third we prove that u is red. Suppose to the contrary that u is blue. If u were on 
B[xb,v], psd{u) would also be on B[xb,v], since xb < u, but this contradicts psd{u) < xb- 
Thus u is not on B[xb,v}. Let x be the first vertex on B[xb,v] that is also on F(u, v]. Since 
f(x) is on F[u,v], b(x) = g(x), so x is blue. This implies psd(x) is on I?[xb,:e], so psd(x) is 
on The definition of u gives prd(x) = u. Since x is blue, if psd(x) = sd(x) then 

x = prd(x) = rd(x) is red by the coloring rule; if psd(x) > sd(x), then u = prd(x) is red by 
Lemma 16.101 

Fourth we prove that u is an ancestor of xr in F. If not, u is a proper descendant of xr 
in F. But then an argument symmetric to the one in the previous paragraph shows that u 
is blue, a contradiction. Thus u is an ancestor of xr in F. 
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Now we consider the relationship of u and xb, our goal being to construct an instance of 
Lemma [6.81 in which y = xb and z = u ot vice- versa. First we prove that xb is blue. Since 
u is on F(xb,xr], %b ^ xr. If xb = w, xr = w = xb since xb < xr < w, a contradiction. 
Thus xr 7^ w. The choice of xb implies b(xs) > xb, so xb is blue. 

Second we prove sd(u) < psd(xs)- Vertex w is on B[psd(xB), xb\- The path P consisting 
of B[psd(xs), w] followed by R[w,v] avoids xb- B[w,v] is simple, so B[psd(xB),w] avoids 
Xb, and xb < xr, so xr is not on R[w,v}. Let y be the first vertex on P that is also on 
F(x B ,v}. The part of P from psdi^xs) to y is a high path, so sd(y) < psd(x B )- The choice 
of u implies sd(u) < sd(y) < psd(xs)- 

Third we prove sd(u) < sd(xs)- If sd(u) = sd(xs), u and xb are the same color by 
Lemma |6.7[ a contradiction. If sd(u) > sd(xB), then psd(xB) > sd(xB) by the result in 
the previous paragraph. By Lemma [6.101 sd(prd(xs)) < sd(x B ) and prd(xs) is red. But 
then x = prd(xs), y = Xb, z = u satisfies the hypothesis of Lemma I6\8| so x B is red, a 
contradiction. The only remaining possibility is sd(u) < sd(xs)- 

We conclude the proof by showing that x = prd(xn), y = u, z = i B satisfies the 
hypothesis of Lemma [6. 8[ so u is blue, a contradiction. This requires some additional work. 
Suppose w is a descendant of u in F. Then the path from sd(u) to xb consisting of the 
high path from sd(u) to u followed by F[u, w] followed by B[w,xb] is a high path for xb, 
giving sd(xs) < sd(u), contradicting the result in the previous paragraph. Thus w is not a 
descendant of u in F. 

Since xr is a descendant of u in F, xr ^ w. This implies t(xr) > xr, so xr is red. 
Since w is on R[psd(xn),xn], w is a descendant of psd(xR) by Lemma [673| so u cannot be 
an ancestor of psd(xn) in F, or w would be a descendant of u. Thus psd(xn) is a proper 
ancestor of u, making u a candidate for prd{xR). This implies sd(prd(xR)) < sd(u) and 
prd{xR) is an ancestor of u, so (i) and (iii) in the hypothesis of Lemma T6.8I hold. We proved 
the first inequality of (ii) above. The path R[psd(xR),w] followed by B[w, xr] is a high path, 
so sd(xs) < psd(xR) < prd(xR), giving the third inequality of (ii). 

We prove that prd(xR) is blue, so (iv) holds. If psd(xR) > sd(xR), then prd(xR) is 
blue by Lemma 16.101 Otherwise psd(xR) = sd(xR). This implies prd(xR) = rd(xR), giving 
sd(rd(xn)) = sd(prd(x R )) < sd(u) < sd(x B ) < psd(xR) = sd(xR), so prd(xn) = rd(xn) is 
blue by the coloring rule. 

Finally, since prd(xR) is an ancestor of u, sd(prd(xji)) = sd(u) would imply that u is blue 
by Lemma [6.71 a contradiction. Thus sd(prd(xn)) < sd(u), giving the second inequality of 
(ii). By Lemma |6.10[ u is blue, the final contradiction. □ 

Summarizing the results of this section, we can construct a low-order for an arbitrary 
graph from its semi-dominator information by building a pair of independent spanning trees 
using Algorithm 8, and then constructing a low-high order using Algorithm 7. This takes 
0(n) time. Although the algorithms are simple, the correctness proof of Algorithm 8 is quite 
complicated. 

7 Applications and Open Problems 

We conclude by mentioning some further applications of our constructions and some open 
problems. We begin with applications. 
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The problem of testing the 2-vertex connectivity of a directed graph can be reduced in 
linear time to verifying that the dominator tree of a flow graph is flat [TTl [32]. Thus the 
remark in Section [5] gives a simple linear-time algorithm for this problem. Our linear-time 
algorithms for computing two (strongly) independent spanning trees can be used in a data 
structure that computes pairs of vertex-disjoint s-t paths in 2-vertex connected digraphs (for 
any two query vertices s and t) [IT], and in fast algorithms for approximating the smallest 
2-vertex connected spanning subgraph of a directed graph [T8j . 

Tholey [UJ considers the following problem: Let (ui,Vi), 1 < % < k, be k pairs of 
vertices of a directed acyclic graph with two distinguished start vertices s\ and S2- For each 
pair (ui,Vi), we wish to test if there are two vertex disjoint paths Pi = (si,...,ti) and 
Pi — ( s 2, ■ ■ ■ , h), where {ti,t 2 } = {ui, Vi}, and to construct such paths if they exist. Tholey 
showed how to test the existence of Pi and Pi in constant time and how to produce them 
in 0(|Pi| + IP2I) time after linear-time preprocessing. He then uses this result to give a 
linear-time algorithm for the 2-disjoint paths problem on a directed acyclic graph. 

Tholey's algorithm for testing the existence of Pi and Pi and for constructing them uses 
dominator trees, shortest-path trees, a topological order of the directed acyclic graph, and 
other structures. The use of a low-high order gives us an alternative solution that works for 
a general directed graph G. We add to G a new root vertex s together with arcs (s, si) and 
(s, S2), and compute the following structures: the dominator tree D, a low-high order of D, 
and two strongly independent spanning trees B and R as described in Section [2j Also, for 
each vertex v 7^ s, we store the child c(v) of s in D that dominates v. All computations take 
linear time. Let u,v 7^ s. We can test if G contains the above vertex-disjoint paths Pi and 
P 2 as follows. If u = v, then the paths exist if and only if c(u) = u. Otherwise, the paths 
exist if and only if c(u) 7^ c(v). This test takes constant time. If the paths exist, we can 
produce them in 0(|Pi| + IP2I) time using B and R as mentioned in the remark in Section 
® 

Now we turn to open problems. A conjecture, attributed to Frank in [48J, states that 
any strongly /^-connected graph contains k disjoint branchings. This vertex-disjointness con- 
jecture is analogous to a well-known theorem of Edmonds on edge-disjoint branchings [14). 
Edmonds's result states that G has k edge-disjoint branchings rooted at s if and only if, for 
every vertex v, there are k edge-disjoint paths from s to v. (See also [T5] for a different char- 
acterization of edge-disjoint branchings.) The vertex-disjointness conjecture was disproved 
in 1995 by Huck [26], who showed that for any k > 3 there is a A;-connected graph that 
does not have k independent branchings. This disproof of the conjecture does not hold in 
special cases. For instance, it does not apply to planar graphs [2B] . In acyclic graphs a state- 
ment related to the vertex-disjointness conjecture is true. Specifically, let G be an acyclic 
directed graph that is /^-connected to a vertex t: for each v 7^ t, there are k vertex-disjoint 
paths from v to t. Then G has k independent in-trees rooted at t [27J. The same result 
was proved independently in [1]; there, the authors gave an algorithm that constructs the 
k trees in 0(k 2 n + km) time, starting from a topological order of G. Itai and Rodeh made 
an analogous vertex-disjointness conjecture for undirected graphs [2^ ED]- Specifically they 
conjectured that for any fc-connected undirected graph G = (V, E) and for any vertex v G V, 
G has k independent spanning trees rooted at v. Itai and Rodeh proved their conjecture for 
the case k = 2, and gave a linear-time construction. The case k = 3 was proved by Cheriyan 
and Maheshwari [8], who also gave a corresponding 0(n 2 )-time algorithm, and by Itai and 
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Zehavi [31]. Curran, Lee and Yu [TT] provided a 0(n 3 )-time algorithm that constructs four 
independent spanning trees of a 4-connected graph, thus proving the k — 4 case. To the best 
of our knowledge, the case k > 5 is open. 

Algorithm 8 raises a couple of open problems: 

(1) Are the trees B and R constructed by Algorithm 8 strongly independent? The example 
in Figure [2] shows that independent trees are not in general strongly independent, but 
the specific trees constructed by Algorithm 8 might be. If so, Algorithm 8 gives a direct 
construction of such trees, avoiding the need to use Algorithms 7 and 1. 

(2) Can the trees B and R constructed by Algorithm 8 be generated from some low-high 
order of D by Algorithm 1? If this is true then (1) is true as well. Furthermore, the 
following would be an alternative to Algorithm 7: Apply Algorithm 8 to construct 
spanning trees B and R. Construct the corresponding spanning trees B' and R' in the 
derived graph. Form the graph K whose arcs are all those in B' but not in D and 
the reversals of all arcs in R' that are not in D. Find a topological order of K. For 
each vertex v^s, arrange its children in D in an order consistent with the topological 
order of K. The preorder on D corresponding to its ordered lists of children will be a 
low-high order. 

Experiments on large graphs suggest that (2) and hence (1) is true, but we have no proof. 

Finally, is there a simple way to extend the iterative algorithm of Cooper et al [10] or 
incremental algorithms for computing dominators [191 El H2] so that they also compute a 
low-high order of the dominator tree? Such an extension would make these into certifying 
algorithms. 
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